Terms of service

Drafted in-house and not reviewed by a lawyer. It states what we will and will not do; it is not legal advice.

Last reviewed 2026-09-04.

These terms are between FLOWXO LLC (“WhooshBang”, “we”, “us”) and the organisation or individual that creates a WhooshBang account (“you”). By creating an account or using the service you agree to them.

Two documents form part of these terms and are worth reading with them: the data processing agreement, which governs personal data, and the privacy statement, which says what we hold about you.

​

1. What the service is

WhooshBang is an API and dashboard for sending notifications to people through messaging channels — Telegram and Slack today — asking a recipient for a decision, and reading the answer back. You bring the recipients, the content and the timing.

We may add, change or remove features. Where a change removes something you depend on, we will give reasonable notice.

​

2. Your account

2.1 You must give accurate account details and keep them current.

2.2 You are responsible for everything done with your credentials, and for keeping them secret. Tell us promptly at privacy@flowxo.com if you believe one has been exposed.

Every credential we issue can be revoked from the dashboard. Organization credentials, project credentials, machine credentials and OAuth grants each have a revoke control there. Revoking an organization credential stops its access across every project in the organization immediately. Where a bot or app is ours rather than yours — the two hosted modes in clause 4.2 — the underlying provider credential serves every customer on that installation and is not yours to revoke; disconnecting the channel stops delivery to your recipients, which is the equivalent control.

2.3 You may invite other people into your organization. What they do with it is your responsibility as between you and us.

2.4 You must be old enough to enter a contract where you live, and you must not use WhooshBang if we have previously terminated your account.

​

3. What you are responsible for

This is the clause that matters most, because the service sends messages to people who have no relationship with us.

3.1 You decide who is messaged. You supply the identifier for each recipient and you decide what they are sent and when. We do not check whether a person wants to hear from you beyond the consent step described below.

3.2 You need a lawful basis for messaging them, and it is yours to establish. Under the data processing agreement you are the controller of your recipients’ data and we are your processor. Telling your users that you will notify them on Telegram or Slack, and having whatever permission the law where they live requires, is your obligation.

3.3 We do give the recipient a real choice, and you may not defeat it. A recipient becomes reachable only by acting on a single-use link, and can withdraw at any time. You must not attempt to circumvent, obscure or discourage that withdrawal, and you must not re-add a recipient who has withdrawn without a fresh act of consent from them.

3.4 You must not use WhooshBang to send unsolicited bulk messages; to send anything unlawful, deceptive, harassing, or infringing; to impersonate anyone; to collect data you have no right to collect; to attempt to break, overload or gain unauthorised access to the service or anyone else’s account; or in breach of Telegram’s or Slack’s own terms, which apply to your use of those channels whether or not the bot is yours.

3.5 Some content does not belong here. Do not send special-category personal data — health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation — or payment card numbers, government identifiers, or credentials. The retention and sealing described in the data processing agreement are not designed for it.

3.6 Export control and sanctions. WhooshBang delivers messages through global providers to recipients whose location we do not choose. You must not use the service in breach of the export control or sanctions laws that apply to either of us, and you must not use it to send messages to a person or organisation you know to be subject to sanctions that prohibit it. If you are established somewhere those laws prohibit your use of a US-operated service, do not create an account.

​

4. Channels and third parties

4.1 Delivery happens through Telegram or Slack. Their terms govern your recipient’s account and their reading of a message, and we do not control them.

4.2 WhooshBang offers five ways to connect a channel. In three of them the bot or app is yours, and your relationship with that provider is direct. In the two hosted modes the bot or app is ours, and our subprocessor list says what that means.

4.3 If a provider suspends, rate-limits or removes a bot — ours or yours — delivery through that channel stops. We will tell you what we know.

​

5. Fees

WhooshBang does not charge today. There is no fee, no payment method and no billing mechanism in the product. We meter accepted sends per organization, project, environment and day so that we know what the service costs to run. That count names no recipient.

If we introduce charges we will give you at least thirty days’ notice before they apply to your account, and you may close your account instead.

​

6. Service levels, stated honestly

6.1 There is no service level agreement, no uptime commitment and no credit scheme. We do not offer one and you should not plan as though we did.

6.2 What we do commit to is design rather than availability: an accepted request is durable, delivery is retried, and a job that keeps failing rests in a dead-letter queue rather than disappearing. A provider outage delays a notification; it does not silently lose it.

6.3 Support is by email at privacy@flowxo.com for data protection matters and through the dashboard otherwise. We do not commit to a response time.

6.4 We may perform maintenance, and may suspend the service briefly to do it.

​

7. Your content, and ours

7.1 What you send stays yours. You keep every right in the content you send and the data you supply. You grant us only the licence needed to run the service: to transmit, store, process and display it for you, and to keep the diagnostic records described in the data processing agreement.

7.2 WhooshBang stays ours — the software, the API, the documentation, the name and the marks. These terms give you a right to use the service, not ownership of any part of it.

7.3 If you send us feedback, we may use it without obligation to you.

​

8. Confidentiality

Each of us will protect the other’s non-public information with reasonable care and use it only to perform these terms. This does not apply to information that is public, already known, independently developed, or lawfully received from somebody else; and either of us may disclose where the law requires it, telling the other first unless forbidden.

​

9. Suspension

9.1 We may pause delivery for your organization, or for one project or channel within it, if you materially breach these terms, if your use threatens the security or stability of the service or another customer, if a channel provider requires it, or if the law requires it.

9.2 A pause is reversible and is not closure. Your data, your configuration and your credentials survive it; messages you send while it is in force are refused rather than queued. We will tell you why, warn you first where the circumstances allow, and lift it when the cause is resolved. Closing an account is termination under clause 10, not suspension, and we will say which one we are doing.

​

10. Term and termination

10.1 These terms run until you or we end them.

10.2 You may close your account at any time.

10.3 We may terminate for material breach that you do not fix within thirty days of notice, or on ninety days’ notice for convenience.

10.4 On termination we will delete or return your personal data at your choice, as clause 8.3 of the data processing agreement sets out — including its statement that this is carried out by an operator rather than by a built control. Retention windows continue to run for anything not yet deleted.

10.5 Clauses 7, 8, 11, 12, 13 and 15 survive termination.

​

11. Warranties and disclaimers

11.1 Each of us warrants that it has the authority to enter into these terms.

11.2 Otherwise the service is provided “as is”. We disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement, to the extent the law allows.

11.3 In particular we do not warrant that a notification will be delivered, that a recipient will read it, or that a channel provider will remain available. Do not use WhooshBang as the only channel for a message where failure to deliver would cause serious harm — including medical, safety-of-life, emergency response, or financial settlement.

​

12. Liability

12.1 Neither of us is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits or revenue, however caused.

12.2 Each party’s total liability under these terms, in aggregate and across every claim, is limited to the greater of the fees you paid us in the twelve months before the first claim, or one hundred US dollars. While the service is free, that is one hundred dollars.

12.3 That cap covers our breach of the data processing agreement too, including the liability we accept there for our subprocessors. We are telling you that plainly rather than burying it, because it is the term most likely to matter to you and the one you are least likely to read.

12.4 If that is too low for you, say so before you rely on the service. The cap is what a free service run by a small company can carry, not a judgement about what your data is worth. We would rather agree a higher limit with a customer who needs one — write to privacy@flowxo.com — than have you discover this figure after something has gone wrong.

12.5 What no contract between us can limit, and what this clause therefore does not touch: a supervisory authority’s power to act against either of us under Article 83, and your users’ own right to claim against us directly under Article 82. A low cap here does not make those go away for us or for you.

12.6 No limit in this clause applies to your obligations under clause 3, to your indemnity under clause 13, to a party’s fraud or wilful misconduct, or to anything the law does not allow us to limit.

​

13. Indemnity

You will defend and indemnify us against any third-party claim arising from your content, your use of the service in breach of clause 3, or your violation of a channel provider’s terms. We will tell you promptly of any such claim and let you control the defence, and we will not settle without your agreement.

​

14. Changes to these terms

We may change these terms. For a material change we will give at least thirty days’ notice by email or in the dashboard, and it takes effect on the date in that notice. Continuing to use the service after that date is acceptance; if you would rather not, close your account.

​

15. Governing law and disputes

These terms are governed by the laws of the State of California, United States, without regard to its conflict of laws rules, and the state and federal courts located in California have exclusive jurisdiction. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Nothing here removes a consumer protection or data protection right that the law where you live gives you and does not allow you to waive.

​

16. General

16.1 Notices. A notice under these terms — a breach notice, a termination, or a change under clause 14 — must be in writing. Ours to you go to the email address on your account, or appear in the dashboard, and take effect the day after they are sent. Yours to us go to privacy@flowxo.com and take effect when we acknowledge them or the next business day, whichever is sooner. Everyday support requests are not notices and do not need this form.

16.2 These terms, with the data processing agreement and the privacy statement, are the entire agreement between us about the service.

16.3 Neither of us may assign these terms without the other’s consent, except to an affiliate or in connection with a merger or sale of substantially all assets.

16.4 If a provision is unenforceable, the rest stands.

16.5 A delay in enforcing a right is not a waiver of it.

16.6 Neither of us is liable for a failure caused by something outside our reasonable control.